Senior Application Security Engineer

Asic; Canberra; Hybride; AUD 154 000 - 177 000; Plein temps

Avantages offerts par ce poste

attractive superannuation

additional leave entitlements

50/50 hybrid work-from home model

flexible work arrangements

assistance for study and professional

Résumé du poste

ASIC’s Cyber Security Group seeks a Senior Application Security Engineer to lead secure development practices across the software lifecycle and embed robust security. You will educate developers on secure coding, govern AI security risks, and drive secure architecture reviews.

You will coordinate penetration testing efforts, partner with development teams, and advance ASIC’s security testing capabilities using SAST/DAST/IAST tools to strengthen the organisation’s overall security posture.

Qualifications

• Bachelor’s degree in computer science or a related discipline; at least five years in software development with application security focus.
• Experience securing CI/CD pipelines, automation, and APIs.
• Hands-on with application security testing methods and tools (SAST/DAST/IAST).
• Proficiency in Java, .NET, Python or JavaScript.
• Ability to assess complex technical and stakeholder issues and drive outcomes.
• Security certifications (CSSLP, CISSP, or similar) are advantageous but not required.

Responsabilités

• Lead secure development practices across the SDLC and DevSecOps initiatives.
• Coordinate and manage penetration testing activities with technical teams and stakeholders.
• Educate developers on secure coding and effective use of ASIC’s security tools.
• Conduct threat modelling and architecture reviews to mitigate risks.
• Provide guidance on secure AI design and governance considerations.

Connaissances

CI/CD security

SAST/DAST/IAST

Threat modelling

Secure coding practices

Cross-team collaboration

Leadership/mentoring

Formation

Bachelor’s degree in Computer Science or related field

Outils

SAST

SCA

DAST

IAST

Description du poste

At ASIC, you can be the change that ensures a fair, strong and efficient financial system for the benefit of all Australians. Contribute to delivering on ASIC's purpose, vision, and strategic priorities to help maintain the integrity of the financial system and protect consumers from harm.

ASIC's Cyber Security Group is seeking an experienced Senior Application Security Engineer to join their Application Security Engineering team to provide ongoing application security support and guidance across the organisation.

• All ASIC office locations considered
• Permanent full-time position
• Salary from $154,355 to $176,927 (depending on experience) + 15.4 % superannuation
• Applications will close at 11:59pm AEDT, Sunday 1 November 2026

The team

ASIC's Cyber Security Group delivers a broad range of services across the organisation which include security architecture and design, incident response, and cyber assurance. We leverage advanced security technologies with a growing emphasis on automation and analytics to help ASIC become a best in class regulator for Australia's financial markets.

The role

As a Senior Application Security Engineer at ASIC, you will help to lead product and application security initiatives and embedding robust security practices across the software development and deployment lifecycle. Additionally, you will support the cyber assurance and cyber architecture functions and play a key role in delivering the Cyber Uplift Program.

More Specifically, You Will

• Partner closely with application development teams to design secure solutions and embed security throughout software development practices and the broader development lifecycle.
• Educate and advise developers on secure coding practices, including the effective use of ASIC's application security testing tools and capabilities.
• Lead threat modelling and application architecture reviews to identify, assess and address security risks and threats throughout the design and development lifecycle.
• Support project delivery by defining and guiding secure architecture practices across applications, code repositories and development environments.
• Manage and coordinate penetration testing activities, including engagement with relevant technical teams and stakeholders.
• Champion DevSecOps and secure software development lifecycle (SDLC) practices across development, engineering and support teams to strengthen security by design.
• Provide` specialist guidance on secure AI design, including AI security risks and controls, responsible AI principles, governance requirements and emerging AI security threats.

About You

The ideal candidate for the Senior Application Security Engineer role at ASIC will be a seasoned security engineering professional with a strong technical foundation in software development and a collaborative mindset. They will bring a proactive approach to embedding security throughout the software development lifecycle and demonstrate leadership in driving secure engineering practices across the organisation.

In Addition, You Will Have

• A bachelor's degree in computer science or a related discipline and/or at least five years' software development experience, combined with demonstrated experience in application security engineering or a comparable security focused role.
• Demonstrated knowledge and practical experience in securing CI/CD pipelines, automation processes and APIs.
• Hands-on experience with application security testing methodologies and tools, including SAST, SCA, DAST and IAST.
• Proficiency in at least one relevant programming or scripting language, such as Java, .NET, Python or JavaScript.
• Demonstrated ability to assess, analyse and resolve complex technical and stakeholder related matters, drawing on relevant information sources, data, reporting, systems and databases to inform appropriate outcomes.
• Relevant security certifications such as Certified Secure Software Lifecycle Professional (CSSLP), Certified Information Systems Security Professional (CISSP), or equivalent secure coding or offensive security certifications are highly regarded but not essential.

About ASIC

ASIC's remit is one of the broadest of regulators across the world. ASIC regulates corporations, markets, financial services and consumer credit and monitors and promotes market integrity and consumer protection in the Australian financial system. Through our enforcement work, we hold to account those who contravene the law, working to achieve strong outcomes that address the greatest consumer and investor harms.

ASIC is an equal opportunity employer seeking people who want to make a difference. ASIC is committed to a diverse and inclusive workplace where the very best talent in Australia chooses to work. Applications from people of all ages, cultural backgrounds, abilities, LGBTIQ+ identity, and people of Aboriginal and Torres Strait Islander descent are encouraged to apply.

We Offer a Range Of Employee Benefits Including

• Attractive superannuation
• Additional leave entitlements
• 50/50 hybrid work-from home model
• Flexible work arrangements
• Assistance for study and professional development

To read more about ASIC, you can visit our website or review our Corporate Plan.

To work with us, you need to be an Australian citizen and be prepared to complete an ASIC Suitability and Baseline Assessment.